Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: qCOBhcIEWMVj3Xqx+XO8LYs9tpnpT0beMYizip6qFBE=
Subject key identifier: 99:1F:0C:1F:D8:9A:B3:33:DA:04:FE:82:0E:DF:C6:3D:AD:AA:3D:21
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 01A103FFDC6C5D9E5D6390CC89B24C43F1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 0D44
Signing time: Sat 03 Oct 2026 23:01:01 +0000
Manifest this update: Sat 03 Oct 2026 23:01:01 +0000
Manifest next update: Sun 04 Oct 2026 23:01:01 +0000
Files and hashes: 1: pdv29nkeNVZwnAAeJaWdQW_1VL4.roa (hash: fB/JSAQUaZyElsKjF4i3d/FqzocJgaIjhcdv4wB8pG4=)
2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: q5HtthDkeIgh+spi0iCLVJDfN6fLbxyG9V1L03kCJgM=)
3: xTTTaBdVu0SeLwv0Gx01IddtE50.roa (hash: ivpMuo01dDNrw/GCqkgH0f4L7FOwQRX4fhYsRXB+ZA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:ff:dc:6c:5d:9e:5d:63:90:cc:89:b2:4c:43:f1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Oct 3 23:01:01 2026 GMT
Not After : Oct 4 23:01:01 2026 GMT
Subject: CN=991f0c1fd89ab333da04fe820edfc63dadaa3d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:0f:3b:15:5e:6c:de:90:ae:dd:b6:2a:d3:
b0:57:41:70:4a:5a:d6:55:c6:a2:b0:d1:d0:84:aa:
c8:4b:de:21:1f:17:c4:38:51:18:67:58:67:4b:65:
7c:27:cb:9a:aa:4d:4a:5b:42:a6:95:b4:01:d6:b0:
9a:24:2a:45:ef:2c:64:5a:45:7b:49:04:2b:30:8b:
51:b2:4f:ff:d1:1c:6c:60:14:69:54:5a:49:55:1d:
3a:97:f4:49:25:8b:b1:c0:a0:69:3c:dd:87:e6:eb:
2e:92:f3:a3:2f:f8:a7:43:3b:a7:0d:8b:40:de:9f:
47:e7:7e:6e:19:bb:32:60:4f:b9:29:a7:e7:7a:51:
8b:be:65:b0:ac:67:ec:1f:be:23:3d:31:13:fc:e6:
52:4e:ef:aa:f8:d2:b9:db:83:5d:33:4f:91:b1:50:
16:ff:f8:3e:63:65:2b:24:25:ab:73:84:d6:06:b1:
0c:0f:57:e5:0c:92:2a:3e:67:b0:98:45:25:d0:30:
cb:79:f6:8c:ee:81:40:9d:99:b6:ee:d9:fb:7a:82:
31:a2:db:fc:4e:48:22:d3:51:88:f5:da:be:c3:50:
2f:da:86:35:80:92:df:76:50:ce:23:ab:38:e7:e5:
7b:f7:1b:98:7e:d2:5e:11:a9:96:9f:8d:11:45:bb:
1b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1F:0C:1F:D8:9A:B3:33:DA:04:FE:82:0E:DF:C6:3D:AD:AA:3D:21
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:26:6a:73:d2:5c:ff:58:c5:31:10:ef:d9:4a:12:9e:43:81:
ba:de:0d:d4:96:5c:7f:0f:4b:d9:6a:2f:e0:ba:8e:b1:95:bd:
10:f7:c4:04:87:b0:b5:e0:dd:62:ac:29:6c:39:c5:81:a3:5b:
97:f5:8c:bd:67:3f:a1:26:1c:2a:04:33:30:65:35:53:8b:7b:
95:ff:a5:07:da:0c:35:b9:e0:cd:5b:36:b8:46:10:c6:de:33:
e3:3a:0c:67:85:f7:e9:7c:d2:48:c7:d2:69:d7:94:b6:bf:30:
6b:c6:cc:c4:da:15:8c:89:29:2e:b9:4b:5a:e5:4b:3e:0a:77:
9e:ba:84:a7:8c:28:aa:04:63:45:6d:84:45:7c:21:31:f2:1a:
06:70:64:74:bc:a5:e8:1c:3d:42:0c:45:db:cd:db:79:99:0d:
f3:a7:b9:11:1a:4a:45:62:60:8a:90:02:26:f3:33:67:c7:14:
d8:5d:d5:c3:a9:97:70:89:15:8b:fa:b0:25:02:60:a5:38:17:
b2:e4:59:8b:e8:48:78:f2:28:24:9e:a0:58:ea:da:d9:57:70:
b4:dd:05:d8:30:2c:2a:70:a6:18:d7:65:3b:45:9d:7d:6c:8b:
70:95:85:94:54:41:22:16:a2:a6:b8:8d:ee:c9:3c:95:56:df:
8b:ce:21:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:14:18 2026 by rpki-client